Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EDE712A72411EFAA3E778F762E951A.roa
File: 51EDE712A72411EFAA3E778F762E951A.roa (raw, json)
Hash identifier: qml+eD2gRjgZv+05TWQt8oNMYM4yrSv+4oxeuUGJq5Q=
Subject key identifier: 15:11:67:DD:E4:CC:D0:51:46:55:5E:01:7E:4B:0D:DA:48:82:D9:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EDE712A72411EFAA3E778F762E951A.roa
Signing time: Wed 20 Nov 2024 09:46:31 +0000
ROA not before: Wed 20 Nov 2024 09:46:27 +0000
ROA not after: Sun 15 Dec 2024 09:46:27 +0000
asID: 214497
IP address blocks: 154.213.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69495 (0x10f77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:46:27 2024 GMT
Not After : Dec 15 09:46:27 2024 GMT
Subject: CN=673daff7-58f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d9:16:61:56:c9:a7:a1:87:0e:09:14:95:0f:
80:ce:ed:3d:82:54:3f:f2:df:e5:04:b1:58:cd:37:
00:0f:5d:4e:3b:56:25:29:02:9d:13:bc:e7:98:a2:
15:bb:aa:cb:0e:bf:ae:1b:63:70:2b:90:fc:18:3d:
a0:69:35:db:44:0d:65:f7:7a:00:d7:d0:ca:1b:5d:
70:56:d9:b0:76:a5:c9:fa:47:fd:2f:44:f0:80:c6:
00:f6:cd:03:90:eb:a8:66:b5:5d:f2:8d:ab:bb:18:
8b:6a:b8:76:33:29:98:4b:5c:58:a0:74:b0:9f:99:
4a:c6:66:9e:0e:f9:d4:d9:83:0d:85:32:25:d2:de:
b5:dd:a4:87:8a:1e:00:79:52:0d:25:b0:1e:c3:8b:
07:f4:28:c3:c1:ec:10:13:0e:00:ad:f9:36:a5:41:
5d:76:a2:fa:d0:31:94:d6:cb:e8:d2:ae:02:6a:82:
7d:7b:3e:7a:e7:12:2b:1b:d9:a4:e7:1a:c4:16:00:
d3:17:f2:88:b1:8e:67:a5:43:4c:5c:27:9f:d0:93:
c8:b8:7a:0a:09:46:a8:0c:99:74:61:72:0d:c0:74:
fb:8a:38:05:b5:e1:ee:c7:95:5a:48:c7:e9:0a:1a:
76:70:6b:dd:16:f8:35:7c:94:89:e4:6f:5c:76:fd:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:11:67:DD:E4:CC:D0:51:46:55:5E:01:7E:4B:0D:DA:48:82:D9:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EDE712A72411EFAA3E778F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.200.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:5a:38:1d:04:2a:47:5b:39:7b:84:21:cc:d5:f6:22:fc:d9:
3f:3b:18:4e:35:84:18:8b:65:32:6d:fa:18:9f:a4:89:04:2a:
61:bf:4a:a4:77:d5:c0:d1:8e:20:dd:12:43:c7:66:fe:16:4f:
e2:29:1a:07:ca:47:4e:d1:10:f9:42:d6:f9:e3:85:5a:35:22:
42:65:46:2f:92:70:7e:fc:7d:9b:3b:b8:cd:43:f6:c9:e2:a4:
23:b1:be:50:08:c7:47:18:d6:39:95:22:3e:6d:c0:98:d9:a5:
7c:da:a7:10:5e:a0:30:14:4a:49:62:27:77:c4:67:81:e0:d1:
fa:ae:33:8f:ff:c4:58:20:de:75:e3:12:48:1c:d0:49:05:47:
ad:5f:25:4e:cd:41:cb:5b:a1:76:8c:c4:62:e4:e6:c6:a3:96:
94:52:11:f0:c0:1b:e8:b0:22:7e:97:bd:76:7c:26:4c:1f:59:
8b:33:09:76:b9:a1:c1:8c:86:77:ff:9f:ca:f5:e1:7b:2f:75:
2a:7c:6f:68:bb:30:29:78:bb:20:82:5d:37:33:d8:69:b1:2d:
d4:f6:85:18:ec:fc:a9:62:27:c5:18:15:19:ea:a4:a0:9f:c4:
cd:bf:a2:cb:0d:db:9a:80:b6:f5:8f:f1:3c:96:b5:9b:6a:4f:
f5:40:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:30 2024 by rpki-client on console-fra.rpki-client.org